Security Intelligence
Application identity abuse targets MSPs and customer environments
Threat actors are using valid application credentials to breach MSPs through Microsoft Entra ID and Azure DevOps. Learn...
Security Intelligence
Barracuda ESG flaws can lead to root access
Barracuda just addressed two vulnerabilities that can be chained on Barracuda Email Security Gateway (ESG) to obtain...
Security Intelligence
Researchers achieve root access through Linux TCP flaw
A critical Linux kernel use-after-free flaw (CVE-2026-98432) enables unauthenticated root access. See patch status and...
Security Intelligence
Trojanized Claude Code extension distributed through Cursor marketplace
A trojanized Claude Code extension (v2.1.313) was distributed via the Cursor marketplace on Oct 29, 2026. Learn what it...
Security Intelligence
PHP2Shell exploited against firewalls
Palo Alto Networks confirms active exploitation of PHP2Shell in PAN-OS firewalls. Learn who’s affected, how attackers...
Security Intelligence
Update: Brotli flaw exposure expands
New research shows the Brotli flaw CVE-2026-111497 reaches beyond web traffic. See newly affected products,...
Security Intelligence
Brotli vulnerability affects multiple software ecosystems
A vulnerability in the Google Brotli decoder has prompted security updates across multiple software ecosystems such as...
Security Intelligence
Another PHP issue identified while vendors report affected products
PHP2Shell exploitation attempts are rising, and a new PHP flaw (CVE-2026-115560) adds confusion. Learn who’s affected,...
Security Intelligence
Active exploitation of Plex2Shell vulnerabilities
CISA added the Plex2Shell exploit chain to its KEV catalog. Learn how attackers exploit Plex Media Server, who’s at...
Security Intelligence
PHP releases emergency updates for critical remote code execution flaws
PHP released emergency updates for CVE-2026-109618 and CVE-2026-109619, vulnerabilities that can allow unauthenticated...
Security Intelligence
AOMEI Backupper supply chain attack
A supply chain campaign targeting AOMEI Technology's update infrastructure has been attributed to threat actor UNC7017,...
Security Intelligence
Compromised ConnectWise Cloud Backup identities used to access Microsoft 365 tenants
ConnectWise disclosed unauthorized access involving application identities associated with ConnectWise Cloud Backup on...